Tons of changes, I guess?

config/hardware/france.nix

@@ -3,8 +3,15 @@
 {
   boot = {
     initrd = {
-      availableKernelModules =
-        [ "uhci_hcd" "ehci_pci" "ata_piix" "ahci" "floppy" "sd_mod" "sr_mod" ];
+      availableKernelModules = [
+        "uhci_hcd"
+        "ehci_pci"
+        "ata_piix"
+        "ahci"
+        "floppy"
+        "sd_mod"
+        "sr_mod"
+      ];
       kernelModules = [ "dm-snapshot" ];
     };
 
@@ -23,23 +30,27 @@
     "/boot" = {
       device = "/dev/disk/by-label/france-boot";
       fsType = "ext4";
+      options = [ "noatime" "nodiratime" ];
     };
 
     "/" = {
       device = "/dev/disk/by-label/france-root";
       fsType = "ext4";
+      options = [ "noatime" "nodiratime" ];
     };
 
     "/var/lib/lxd/storage-pools/pool0" = {
       device = "/dev/disk/by-label/pool0";
       fsType = "btrfs";
       label = "pool0";
+      options = [ "noatime" "nodiratime" "noexec" ];
     };
 
     "/var/lib/lxd/storage-pools/pool1" = {
       device = "/dev/france-user/fudo-user";
       fsType = "btrfs";
       label = "pool1";
+      options = [ "noatime" "nodiratime" "noexec" ];
     };
   };
 
@@ -50,6 +61,8 @@
   hardware.bluetooth.enable = false;
 
   networking = {
+    useDHCP = false;
+
     macvlans = {
       intif0 = {
         interface = "enp4s0f1";
@@ -60,6 +73,11 @@
         interface = "enp4s0f0";
         mode = "bridge";
       };
+
+      # extif1 = {
+      #   interface = "enp4s0f0";
+      #   mode = "bridge";
+      # };
     };
 
     interfaces = {
@@ -72,6 +90,11 @@
         # output of: echo france-extif0|md5sum|sed 's/^\(..\)\(..\)\(..\)\(..\)\(..\).*$/02:\1:\2:\3:\4:\5/'
         macAddress = "02:5e:ff:e4:83:e4";
       };
+
+      # extif1 = {
+      #   # output of: echo france-extif1|md5sum|sed 's/^\(..\)\(..\)\(..\)\(..\)\(..\).*$/02:\1:\2:\3:\4:\5/'
+      #   macAddress = "02:30:91:97:40:1f";
+      # };
     };
   };
 }

config/hardware/legatus.nix

@@ -0,0 +1,75 @@
+{ config, lib, pkgs, ... }:
+
+with lib; {
+  boot = {
+    initrd = {
+      availableKernelModules = [
+        "ahci"
+        "usbhid"
+      ];
+      kernelModules = [ "dm-snapshot" ];
+    };
+    kernelModules = [ ];
+    extraModulePackages = [ ];
+    loader.grub = {
+      enable = true;
+      version = 2;
+      device = "/dev/sda";
+    };
+
+    supportedFilesystems = [ "btrfs" ];
+  };
+
+  fileSystems = {
+    "/" = {
+      device = "root-tmpfs";
+      fsType = "tmpfs";
+      options = [ "mode=755" "noexec" ];
+    };
+
+    "/boot" = {
+      device = "/dev/disk/by-label/boot";
+      fsType = "ext4";
+      options = [ "noexec" "noatime" "nodiratime" ];
+    };
+
+    "/nix" = {
+      device = "/dev/disk/by-label/system";
+      fsType = "btrfs";
+      options = [ "subvol=@nix" "compress=zstd" "noatime" "nodiratime" ];
+    };
+
+    "/var/log" = {
+      device = "/dev/disk/by-label/system";
+      fsType = "btrfs";
+      options = [ "subvol=@logs" "compress=zstd" "noatime" "nodiratime" "noexec" ];
+      neededForBoot = true;
+    };
+
+    "/state" = {
+      device = "/dev/disk/by-label/system";
+      fsType = "btrfs";
+      options = [ "subvol=@state" "compress=zstd" "noatime" "nodiratime" "noexec" ];
+    };
+  };
+
+  swapDevices = [{ device = "/dev/disk/by-label/swap"; }];
+
+  networking = {
+    macvlans = {
+      extif0 = {
+        interface = "eno2";
+        mode = "bridge";
+      };
+    };
+
+    useDHCP = false;
+
+    interfaces = {
+      extif0 = {
+        # output of: echo legatus-extif0|md5sum|sed 's/^\(..\)\(..\)\(..\)\(..\)\(..\).*$/02:\1:\2:\3:\4:\5/'
+        macAddress = pkgs.lib.fudo.network.generate-mac-address "legatus" "extif0";
+      };
+    };
+  };
+}

config/hardware/mail-container.nix

@@ -0,0 +1,5 @@
+{ config, lib, pkgs, ... }:
+
+{
+
+}

config/hardware/socrates.nix

@@ -71,6 +71,7 @@
         device = "/dev/disk/by-label/socrates-data";
         fsType = "btrfs";
         options = [ "subvol=@log" "compress=zstd" "noatime" "nodiratime" "noexec" ];
+        neededForBoot = true;
       };
 
       "/state" = {